Re: Wireless LAN Certificate Extensions

["Housley, Russ" <rhousley@xxxxxxxxxxxxxxx>]

Hiroyuki:

Okay, so we agree that the SSID is the appropriate value.

I understand your desire to link the SSID to a certificate after it is 
issued.  This will complicate the application.  First, it would locate the 
AC that contains the desired SSID.  Next, the AC holder field is used to 
locate the PKC.

Russ


> Hi Russ,
>
> >>>>> On Mon, 29 Jul 2002 11:52:39 -0400,
>         "Housley, Russ" <rhousley@xxxxxxxxxxxxxxx> said
>         about: Re: Wireless LAN Certificate Extensions:
>
> rhousley> >rhousley> I propose that we stick with SSID as described in the 
> document.
>
> rhousley> >If this extension can be included in either PKC or AC, we can 
> select
> rhousley> >the alternative for a volatile SSID with reduced revocation 
> cost, I think.
> rhousley> >Any comments?
>
> rhousley> I only envision these extensions being included in PKCs.
> rhousley> What do you propose instead of the SSID?   Tim Moore (my 
> co-author) could
> rhousley> not find an appropriate value that was more stable than the SSID.
>
> I assume that SSIDs will be assigned by wireless-network service
> providers or corporate network administrators, and the assignment will
> NOT be depend on issuing PKC of the network client.
> In other words, a lifecycle of PKC should be different from each SSIDs' .
>
> My proposal is to allow including WLAN SSID EXT. into AC.
>
> Thanks,
>
> ----
> Hiroyuki CHIBA: hiro@xxxxxxxxxxxxxxxxxx clin@xxxxxxxxx
>      Security Solution Promoting Division, Hitachi,Ltd.